Approved changes feed: RSS · Atom

cpe:2.3:a:jfrog:artifactory_self-hosted:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJfrog (22eacafb-32ef-571d-9c05-c2b5f5d3b0e8)
ProductArtifactory Self Hosted (af0ac8cf-1e88-53af-b8d5-7651af421d12)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-3505 vulnerable 2026-06-08 06:41:53.485025 JFrog Self-Hosted Artifactory Proxy configuration accessible to low-privilege users
MEDIUM (4.3)
JFrog Artifactory Self-Hosted versions below 7.77.3, are vulnerable to sensitive information disclosure whereby a low-privileged authenticated user can read the proxy configuration. This does not affect JFrog cloud deployments.
Published: 2024-04-15T07:42:27.975Z
Updated: 2024-08-01T20:12:07.415Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.